Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: Jd5jKgXrlnGzvaaw861I9GAZDqvzzDlvARzUWIcZDFQ=
Subject key identifier: AD:FC:7F:54:A1:6D:F1:E2:04:CA:95:72:87:DB:2A:73:49:C0:43:F9
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019FA974DA39A4AA9A83F83342040021E44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 111E
Signing time: Tue 28 Jul 2026 16:00:35 +0000
Manifest this update: Tue 28 Jul 2026 16:00:35 +0000
Manifest next update: Wed 29 Jul 2026 16:00:35 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 7W9SOx9JOku1DcUB9IlSRZYPfh7FaOD16wMAFTy/BjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:da:39:a4:aa:9a:83:f8:33:42:04:00:21:e4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jul 28 16:00:35 2026 GMT
Not After : Jul 29 16:00:35 2026 GMT
Subject: CN=adfc7f54a16df1e204ca957287db2a7349c043f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:9d:5b:ad:ca:3b:6e:b2:a0:be:4a:4a:40:
21:58:c6:84:43:db:f3:6e:9a:82:39:d9:1f:2a:48:
67:de:81:3c:72:b4:b2:c3:8c:4c:b6:5f:d2:40:4f:
24:67:9c:69:30:d3:c4:87:40:05:eb:e8:89:b8:fb:
b2:75:15:2f:53:31:a8:80:af:27:7a:3e:e0:5f:83:
1c:cc:52:f0:97:68:72:fb:7a:0b:bd:26:23:42:57:
9b:0e:49:3e:83:30:6e:48:9b:c5:83:f3:75:a9:10:
0b:ba:a6:b1:a5:ad:5e:85:93:5d:e0:b2:ae:fc:4f:
69:10:08:5e:92:ec:77:c3:08:ef:94:41:cd:0c:4b:
17:73:4f:52:e4:27:87:42:33:8a:db:b5:4c:9b:15:
e2:69:df:67:ac:f9:ec:5a:8e:2f:16:04:76:1d:23:
8b:5f:4e:80:8f:37:ba:00:d2:36:d4:ea:22:ad:64:
84:a8:74:0e:00:f1:91:e7:73:83:3d:34:3d:d7:2b:
ad:b9:8a:a0:31:a1:4e:4f:8f:fb:bf:7c:ee:93:a8:
37:26:c0:48:6c:4c:1e:7f:0b:e4:d2:36:0e:48:1a:
54:c8:07:20:56:1e:cb:2c:a6:53:f5:0e:24:f3:2e:
31:35:3b:4a:58:3e:cf:25:88:95:3b:07:a5:4b:31:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:7F:54:A1:6D:F1:E2:04:CA:95:72:87:DB:2A:73:49:C0:43:F9
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:75:8a:2b:21:78:07:76:d2:f9:1c:ad:f3:95:bb:4d:e6:c4:
0a:de:04:c9:57:34:c1:05:81:d9:0b:58:3e:34:cc:66:8f:be:
46:69:5a:80:32:11:da:1f:e3:f9:ba:c3:ed:95:8f:01:c3:70:
b7:0b:74:09:4c:d7:c7:07:1d:05:a2:57:12:93:98:e5:93:09:
d9:48:e2:eb:78:99:eb:09:96:0e:7e:5a:5d:da:2b:29:3d:7c:
b9:1a:3e:37:86:94:15:a3:a2:f4:6a:b3:2d:b1:06:09:6d:13:
b8:01:27:17:92:54:4e:21:6d:ec:71:b0:4c:3e:06:8f:ed:89:
70:a6:4e:a5:c4:85:4d:73:e7:ad:89:10:6e:de:5f:d5:84:45:
b9:cd:39:a6:9c:d0:40:9e:42:f8:ad:44:b5:b8:2e:e1:ed:1d:
db:38:cb:7f:7e:10:d7:03:7f:19:88:fe:12:d2:42:09:d8:f4:
69:00:c6:0c:de:81:d0:34:96:6a:fa:cf:8f:b8:9b:dc:b7:e9:
6a:ce:60:96:b1:f9:6d:a7:33:0e:b0:06:99:8b:1e:76:56:08:
51:96:50:df:a3:0f:3a:b8:ba:e1:8f:6f:41:89:ce:7f:d3:4f:
cc:4f:37:8c:9d:6f:fa:4e:c6:09:6d:0a:bb:65:44:18:a2:ac:
47:57:17:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdNo5pKqag/gzQgQAIeRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjYwNzI4MTYwMDM1WhcNMjYwNzI5MTYwMDM1WjAzMTEwLwYDVQQD
EyhhZGZjN2Y1NGExNmRmMWUyMDRjYTk1NzI4N2RiMmE3MzQ5YzA0M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuqdW63KO26yoL5KSkAhWMaEQ9vz
bpqCOdkfKkhn3oE8crSyw4xMtl/SQE8kZ5xpMNPEh0AF6+iJuPuydRUvUzGogK8n
ej7gX4MczFLwl2hy+3oLvSYjQlebDkk+gzBuSJvFg/N1qRALuqaxpa1ehZNd4LKu
/E9pEAhekux3wwjvlEHNDEsXc09S5CeHQjOK27VMmxXiad9nrPnsWo4vFgR2HSOL
X06Ajze6ANI21OoirWSEqHQOAPGR53ODPTQ91yutuYqgMaFOT4/7v3zuk6g3JsBI
bEwefwvk0jYOSBpUyAcgVh7LLKZT9Q4k8y4xNTtKWD7PJYiVOwelSzG19QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK38f1ShbfHiBMqVcofbKnNJwEP5MB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXWKKyF4
B3bS+Ryt85W7TebECt4EyVc0wQWB2QtYPjTMZo++RmlagDIR2h/j+brD7ZWPAcNw
twt0CUzXxwcdBaJXEpOY5ZMJ2Uji63iZ6wmWDn5aXdorKT18uRo+N4aUFaOi9Gqz
LbEGCW0TuAEnF5JUTiFt7HGwTD4Gj+2JcKZOpcSFTXPnrYkQbt5f1YRFuc05ppzQ
QJ5C+K1Etbgu4e0d2zjLf34Q1wN/GYj+EtJCCdj0aQDGDN6B0DSWavrPj7ib3Lfp
as5glrH5baczDrAGmYsedlYIUZZQ36MPOri64Y9vQYnOf9NPzE83jJ1v+k7GCW0K
u2VEGKKsR1cXGw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:17 2026 by rpki-client